Product by Francoisjacquet

    RosarioSIS

    16 known vulnerabilities in RosarioSIS (Francoisjacquet), 0 of them actively exploited (CISA KEV).

    Key figures

    16

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in RosarioSIS (Francoisjacquet)
    CriticalCVE-2022-2067

    SQL Injection in francoisjacquet/rosariosis

    also in 2 other products

    		8.8
    HighCVE-2026-121731

    RosarioSIS before 12.9 SQL Injection via period_id in Attendance Absence Report

    		8.8
    HighCVE-2023-0994

    Exposure of Sensitive Information to an Unauthorized Actor in francoisjacquet/rosariosis

    also in 2 other products

    		8.1
    CriticalCVE-2022-2036

    Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosis

    also in 2 other products

    		9.0
    HighCVE-2022-3072

    Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosis

    also in 2 other products

    		8.0
    CriticalCVE-2022-2714

    Improper Handling of Length Parameter Inconsistency in francoisjacquet/rosariosis

    also in 2 other products

    		8.1
    HighCVE-2022-1997

    Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosis

    also in 2 other products

    		8.8
    MediumCVE-2026-116217

    RosarioSIS before 12.9.2 Reflected XSS via menu_id in MenuReports.php

    		6.1
    MediumCVE-2026-19784

    francoisjacquet RosarioSIS Referrals.php DBUpdate authorization

    		4.3
    MediumCVE-2026-19785

    francoisjacquet RosarioSIS Student Medical Medical.inc.php sql injection

    		6.3
    HighCVE-2023-2665

    Storage of Sensitive Data in a Mechanism without Access Control in francoisjacquet/rosariosis

    also in 2 other products

    		7.5
    MediumCVE-2026-116010

    RosarioSIS before 12.9.1 Missing Authorization in Teacher Save Handlers

    		4.3
    MediumCVE-2026-19786

    francoisjacquet RosarioSIS Modules.php cross-site request forgery

    		4.3
    LowCVE-2026-121732

    RosarioSIS before 12.9 Improper Authorization via Student Billing Mass Assignment

    		2.7
    MediumCVE-2023-2202

    Improper Access Control in francoisjacquet/rosariosis

    also in 2 other products

    		4.6
    LowCVE-2024-3138

    francoisjacquet RosarioSIS Add Portal Note cross site scripting

    		3.5

    All products by Francoisjacquet